CVE-2026-106184

Vendor

Google

Product

chrome, chromium

EPSS

0.003 (p20)

Exposure class

Browser, Operating system, Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   Advisory MSRC 15d ago

   Chromium CVE-2026-106184: Uninitialized resource

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-106184 Microsoft Google
2. 31
   Chrome release Chrome Releases 11d ago

   Stable Channel Update for ChromeOS / ChromeOS Flex

   M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS…

   CVE-2026-106200CVE-2026-106347CVE-2026-106204+114 more Google
3. 25
   Chrome release Chrome Releases 18d ago

   Extended Stable Update for Desktop

   The Extended Stable channel has been updated to 152.0.7977.167 for Windows and Mac which will roll out over the coming days/weeks. Security Fixes Note: Access to bug details and links may be kept restricted until a majority of…

   CVE-2026-106347CVE-2026-106358CVE-2026-110136+25 more Google
4. 23
   CVE NVD 25d ago

   Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

   Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-106184 Google